last executing test programs: 1m52.022152411s ago: executing program 2 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 1m51.325084411s ago: executing program 2 (id=299): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40002140, &(0x7f0000000180)=@caif=@rfm={0x25, 0x100, "447189e59e6eeb3f656be7bdf0c239b2"}, 0x80) syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000300)={r7, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={r8, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x0, [0x40000020, 0x8]}, {0x80000000, 0x0, 0x0, [0xc1b, 0xfffffff9]}, 0x1, [0x1, 0x8]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1m46.714984811s ago: executing program 2 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 1m46.578043363s ago: executing program 2 (id=314): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m45.110581105s ago: executing program 2 (id=319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x120, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendto$inet(r0, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m42.939693239s ago: executing program 2 (id=328): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) 1m42.426742036s ago: executing program 32 (id=328): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) 15.15657866s ago: executing program 3 (id=588): syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) syz_usbip_server_init(0x4) epoll_create1(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) r0 = syz_usbip_server_init(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x80000000, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7330, 0x0, 0x0, 0x0, 0x0) 13.940343279s ago: executing program 3 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pipe2(0x0, 0x4000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.023129929s ago: executing program 0 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r6, 0x9}}, 0x10) close(r5) 7.618496185s ago: executing program 3 (id=603): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$eJzs3D1v00Acx/Gf40BIQTyKBzFVQkIsJNBWqrLRhY03gMRQtaGqcKE0LI2QoG+CnZWJl8A7YWVoBzYmDp19AcdJ8cUhcYS/H6mNY9/P/3Pbs32NEgGorEfx90Bn3HNjzLtlSU+fSKqV2jUAM2bc408DoHpChj5QUScbYXz9/xJIX7+/3Tp2X+c87x9ONpJJgp0/HKfyzdMCzzL5oyB+vF0fzi9JOj8Sro/ev3xM8ncz9S/49t/VX8rkG9755Pjv3RnOX5R0SdJlSVckXZV0TYp3e11uQ6r+dqb+rWTzkWc3AAAAAAD4Kzv7bA2e+E76s/mWT8sHY9fa2fPz3ag7fquHWpJ/6NV49ADPuvorBcsP8quZPuVyL7g2XL619SraLtgHoKhaevznGxlA/uNfY/+dFU45/utx/kPBNFBtvcP+i80o6h7MbUGaNGUvlcWLNgcL33Ibf7IL+pG8MjL7n8bgZGrXLPukAtd4br8v5bd5n9OmqYOe8djP3BdeP07u3mZQwl6U0mv60+4wyI7T+tAg+pz6Q4oiE/b2/8Fx2R2a8PeJIizj7ARgltpv9vbbvcP+/d29zZ3uTvfl2nqns762utJpx7fl7akm5wAW2Z+Lftk9AQAAAAAAAAAAAAAARd2QdHPy2Kkf7wEAAABgcU3+xqDGxG8nKvsYAQAAAAAAAAAAAAD43/0KAAD//3hpPUA=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 7.28188365s ago: executing program 3 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000480)={0x27}, 0x6) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)=""/224, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.911388136s ago: executing program 0 (id=611): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 4.773514718s ago: executing program 4 (id=612): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,us']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000400000002000000010000060400000000006800007f00000000002e"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x8, 0x81, 0x9, 0x80000000, 0x5, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.697305719s ago: executing program 0 (id=613): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x5, @mcast1, 0x6}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18a6e3cdb8049d6d6f6d6bd5703a6b9027389878bc35558e24327ddff789162ead569e86246e6701d4251b8106e6ef6f52f2a2265382e5d8e02ed655e4a203362da68db5b0e884220ded5b2319fbd52ccc905fd9a6f60ac4268a1aac02d80104ba6b72b925cc1c1deaa8db25763ed5e6a80d26d124f1ea56136d9bed1ebf52a7ae435c75c4739afa46fcc6a41648be0a4c6efcf42e59b029be3777777b123c493f14b955acbaf678630b60f1724da833b2", 0x130) 4.516252202s ago: executing program 3 (id=614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d"], 0xa8}}, 0x0) 4.406281814s ago: executing program 4 (id=615): syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) syz_usbip_server_init(0x4) epoll_create1(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = syz_usbip_server_init(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x80000000, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7330, 0x0, 0x0, 0x0, 0x0) 4.138471477s ago: executing program 5 (id=616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001d40)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xbe6}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nogrpid}, {@acl}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") 3.713335614s ago: executing program 3 (id=617): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x40, 0x0) 3.643593335s ago: executing program 0 (id=618): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioperm(0x376, 0x5, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}]}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b", @ANYRES64], 0x22) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3.150865522s ago: executing program 1 (id=619): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, 0x0, 0x0, 0x20040000}}], 0x1, 0x4) pipe(0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) 3.129689183s ago: executing program 0 (id=620): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.050644214s ago: executing program 5 (id=621): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) close$binfmt(r1) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 3.027058134s ago: executing program 1 (id=622): sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2.995785175s ago: executing program 4 (id=623): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x8, 0x81, 0x9, 0x80000000, 0x5, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.814967357s ago: executing program 1 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000480)={0x27}, 0x6) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)=""/224, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.755190468s ago: executing program 5 (id=625): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) 2.740185589s ago: executing program 4 (id=626): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 2.606443841s ago: executing program 5 (id=627): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8000}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 1.768616073s ago: executing program 4 (id=628): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x5, @mcast1, 0x6}, 0x1c) write(r0, &(0x7f0000000300)="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", 0x130) 1.715944304s ago: executing program 5 (id=629): bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x0) shutdown(r3, 0x0) 1.372991099s ago: executing program 0 (id=630): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioperm(0x376, 0x5, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}]}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b", @ANYRES64], 0x22) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 413.913194ms ago: executing program 5 (id=631): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40002140, &(0x7f0000000180)=@caif=@rfm={0x25, 0x100, "447189e59e6eeb3f656be7bdf0c239b2"}, 0x80) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) listen(r5, 0x0) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r7, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x0, [0x40000020, 0x8]}, {0x80000000, 0x0, 0x0, [0xc1b, 0xfffffff9]}, 0x1, [0x1, 0x8]}) connect$x25(r5, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 266.696056ms ago: executing program 1 (id=632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, 0x0, 0x0, 0x20040000}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 112.459888ms ago: executing program 4 (id=633): syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) syz_usbip_server_init(0x4) epoll_create1(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = syz_usbip_server_init(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x80000000, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7330, 0x0, 0x0, 0x0, 0x0) 37.73289ms ago: executing program 1 (id=634): sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 0s ago: executing program 1 (id=635): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0xb110f000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x0, 0x11}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x400000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) kernel console output (not intermixed with test programs): 0] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.328212][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.338962][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.348409][ T4178] device bridge_slave_0 entered promiscuous mode [ 69.366616][ T4170] team0: Port device team_slave_0 added [ 69.382474][ T4170] team0: Port device team_slave_1 added [ 69.389979][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.399643][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.407351][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.415795][ T4178] device bridge_slave_1 entered promiscuous mode [ 69.422748][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.430064][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.438304][ T4175] device bridge_slave_0 entered promiscuous mode [ 69.447048][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.454134][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.462267][ T4175] device bridge_slave_1 entered promiscuous mode [ 69.511266][ T4169] team0: Port device team_slave_0 added [ 69.549614][ T4169] team0: Port device team_slave_1 added [ 69.557448][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.567592][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.574551][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.600681][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.614902][ T4180] team0: Port device team_slave_0 added [ 69.623137][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.642113][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.651850][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.658949][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.685320][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.697901][ T4180] team0: Port device team_slave_1 added [ 69.709568][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.764308][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.771329][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.798160][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.811017][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.818200][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.844216][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.858085][ T4175] team0: Port device team_slave_0 added [ 69.907806][ T4175] team0: Port device team_slave_1 added [ 69.917882][ T4170] device hsr_slave_0 entered promiscuous mode [ 69.924673][ T4170] device hsr_slave_1 entered promiscuous mode [ 69.932099][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.939298][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.965848][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.978645][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.985845][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.012445][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.026686][ T4178] team0: Port device team_slave_0 added [ 70.035134][ T4178] team0: Port device team_slave_1 added [ 70.100018][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.107208][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.133786][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.146467][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.153434][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.180313][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.197452][ T4169] device hsr_slave_0 entered promiscuous mode [ 70.204341][ T4169] device hsr_slave_1 entered promiscuous mode [ 70.211401][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.219644][ T4169] Cannot create hsr debugfs directory [ 70.226362][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.233417][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.264157][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.279119][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.286371][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.312514][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.371822][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 70.375489][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 70.379087][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.415476][ T4180] device hsr_slave_0 entered promiscuous mode [ 70.422490][ T4180] device hsr_slave_1 entered promiscuous mode [ 70.429398][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.437049][ T4180] Cannot create hsr debugfs directory [ 70.445382][ T3506] Bluetooth: hci0: command 0x0409 tx timeout [ 70.452159][ T3506] Bluetooth: hci4: command 0x0409 tx timeout [ 70.455828][ T4175] device hsr_slave_0 entered promiscuous mode [ 70.465606][ T4175] device hsr_slave_1 entered promiscuous mode [ 70.472261][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.479997][ T4175] Cannot create hsr debugfs directory [ 70.524593][ T4178] device hsr_slave_0 entered promiscuous mode [ 70.531593][ T4178] device hsr_slave_1 entered promiscuous mode [ 70.538339][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.546693][ T4178] Cannot create hsr debugfs directory [ 70.857331][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.870153][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.884449][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.894905][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.954658][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.981697][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.992600][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.008544][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.040021][ T4178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.049700][ T4178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.061985][ T4178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.087735][ T4178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.159462][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.177516][ T4175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.188960][ T4175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.198194][ T4175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.225074][ T4175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.246639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.263060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.298569][ T4180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.310528][ T4180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.320726][ T4180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.330756][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.348742][ T4180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.369662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.382421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.392243][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.399738][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.410423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.419445][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426339][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.438403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.448458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.459067][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.466189][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.493381][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.521373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.531892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.541230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.550603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.575055][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.598635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.608136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.623171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.631993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.641325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.650665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.659740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.679868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.690584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.699868][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.707115][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.724714][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.739099][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.750363][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.764004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.772590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.781378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.803294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.812781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.831136][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.843925][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.854659][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.864149][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.871305][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.887398][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.899140][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.924301][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.942834][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.951397][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.984572][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.005708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.014985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.032016][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.039183][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.049218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.058003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.066778][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.073938][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.081890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.091165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.100775][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.107994][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.115988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.124713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.133809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.143868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.152865][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.160008][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.168038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.177870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.187110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.195526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.204676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.227397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.237907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.247116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.256425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.265105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.274106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.283164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.292496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.303238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.311405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.343115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.350898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.358820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.372408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.381158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.390692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.399224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.407875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.417823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.427595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.436574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.445706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.445776][ T4224] Bluetooth: hci1: command 0x041b tx timeout [ 72.466132][ T4224] Bluetooth: hci2: command 0x041b tx timeout [ 72.467411][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.472321][ T4224] Bluetooth: hci3: command 0x041b tx timeout [ 72.492965][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.513317][ T4175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.530086][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.541376][ T4224] Bluetooth: hci4: command 0x041b tx timeout [ 72.554093][ T4224] Bluetooth: hci0: command 0x041b tx timeout [ 72.565493][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.572498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.581220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.589858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.599717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.608946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.618077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.628555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.638762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.648064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.657852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.669400][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.708986][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.731164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.752144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.782038][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.789244][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.806473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.823358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.832503][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.839679][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.848111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.858168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.879133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.890700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.914897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.937246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.946887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.993848][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.018345][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.031538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.044667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.053920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.063113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.071901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.081232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.090683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.099328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.107669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.115529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.139874][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.174135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.183500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.204397][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.223542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.233752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.258583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.275793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.283330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.294157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.305844][ T4170] device veth0_vlan entered promiscuous mode [ 73.314244][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.327543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.344434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.387088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.403543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.413974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.424013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.438604][ T4170] device veth1_vlan entered promiscuous mode [ 73.448771][ T4178] device veth0_vlan entered promiscuous mode [ 73.489502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.501535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.510497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.519556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.556471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.567258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.576150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.588016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.603050][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.613462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.622840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.637748][ T4170] device veth0_macvtap entered promiscuous mode [ 73.648189][ T4169] device veth0_vlan entered promiscuous mode [ 73.662669][ T4178] device veth1_vlan entered promiscuous mode [ 73.671443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.681443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.689977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.700536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.720873][ T4170] device veth1_macvtap entered promiscuous mode [ 73.740672][ T4169] device veth1_vlan entered promiscuous mode [ 73.757504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.766814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.774812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.783740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.793516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.803061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.815494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.854704][ T4178] device veth0_macvtap entered promiscuous mode [ 73.867787][ T4175] device veth0_vlan entered promiscuous mode [ 73.885642][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.893862][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.907647][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.920511][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.929226][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.938742][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.947752][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.956492][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.967140][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.984503][ T4175] device veth1_vlan entered promiscuous mode [ 73.998541][ T4178] device veth1_macvtap entered promiscuous mode [ 74.006712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.016043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.028476][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.048747][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.059094][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.069877][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.078952][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.096307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.106905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.116951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.127784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.139244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.149647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.164732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.174210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.185215][ T4169] device veth0_macvtap entered promiscuous mode [ 74.209755][ T4180] device veth0_vlan entered promiscuous mode [ 74.233781][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.246702][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.260553][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.272213][ T4169] device veth1_macvtap entered promiscuous mode [ 74.291721][ T4175] device veth0_macvtap entered promiscuous mode [ 74.313374][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.322642][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.331991][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.341002][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.350132][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.358851][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.369963][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.383082][ T4180] device veth1_vlan entered promiscuous mode [ 74.405790][ T4175] device veth1_macvtap entered promiscuous mode [ 74.430891][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.443406][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.457979][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.472660][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.482573][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.491709][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.500720][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.525961][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 74.532237][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.540210][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 74.546705][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.547334][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 74.560621][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.569338][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.582079][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.593689][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.605146][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.606230][ T4221] Bluetooth: hci0: command 0x040f tx timeout [ 74.615905][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.627520][ T4221] Bluetooth: hci4: command 0x040f tx timeout [ 74.632830][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.650036][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.663962][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.680500][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.692712][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.703702][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.714746][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.731735][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.740938][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.750817][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.760054][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.777453][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.789597][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.801320][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.812091][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.822262][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.832911][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.844352][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.866905][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.877107][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.886464][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.896265][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.918987][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.929930][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.961693][ T4180] device veth0_macvtap entered promiscuous mode [ 74.971875][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.982308][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.993773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.003780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.012935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.030055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.044366][ T4180] device veth1_macvtap entered promiscuous mode [ 75.052773][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.063881][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.074072][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.084625][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.095304][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.106414][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.118745][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.153657][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.162016][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.172007][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.191942][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.201120][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.211539][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.220830][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.246945][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.262797][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.289771][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.301422][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.311516][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.323488][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.334228][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.345079][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.355551][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.366301][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.378221][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.389550][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.398155][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.407297][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.428168][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.439824][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.447074][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.449407][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.462388][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.478799][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.489097][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.499911][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.510063][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.520680][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.531752][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.542718][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.557403][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.566754][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.575852][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.627477][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.639194][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.649732][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.704405][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.712895][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.722743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.768201][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.785965][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.832237][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.894674][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.917404][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.081270][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.092589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.239302][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.334501][ T4261] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.607720][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 76.631725][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 76.726737][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.775601][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.807579][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 76.816105][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 76.822233][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 76.836833][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.839795][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.844874][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.854201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.912803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.988032][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.998894][ T4269] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 77.006692][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.020421][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.029490][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.030206][ T4271] loop0: detected capacity change from 0 to 512 [ 77.057518][ T4261] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.069064][ T4261] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.084692][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.092162][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.100339][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.107518][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.120891][ T4271] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.146383][ T4271] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.209178][ T4269] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.209821][ T4271] EXT4-fs (loop0): 1 truncate cleaned up [ 77.229535][ T4271] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.266323][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.420325][ T4280] loop2: detected capacity change from 0 to 256 [ 77.486426][ T4280] ======================================================= [ 77.486426][ T4280] WARNING: The mand mount option has been deprecated and [ 77.486426][ T4280] and is ignored by this kernel. Remove the mand [ 77.486426][ T4280] option from the mount to silence this warning. [ 77.486426][ T4280] ======================================================= [ 78.557583][ T4280] FAT-fs (loop2): Directory bread(block 64) failed [ 78.564449][ T4280] FAT-fs (loop2): Directory bread(block 65) failed [ 78.604057][ T4280] FAT-fs (loop2): Directory bread(block 66) failed [ 78.692126][ T4280] FAT-fs (loop2): Directory bread(block 67) failed [ 78.695743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 78.764040][ T4280] FAT-fs (loop2): Directory bread(block 68) failed [ 78.794101][ T4280] FAT-fs (loop2): Directory bread(block 69) failed [ 78.824704][ T4280] FAT-fs (loop2): Directory bread(block 70) failed [ 78.856785][ T4280] FAT-fs (loop2): Directory bread(block 71) failed [ 78.911288][ T4280] FAT-fs (loop2): Directory bread(block 72) failed [ 78.930420][ T4280] FAT-fs (loop2): Directory bread(block 73) failed [ 79.027860][ T4304] process 'syz.1.13' launched '/dev/fd/-1' with NULL argv: empty string added [ 79.315227][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.415975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.425945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.435190][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.444279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.453426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.463475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.472593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.481698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 81.052490][ T4296] loop0: detected capacity change from 0 to 32768 [ 81.307577][ T4331] loop4: detected capacity change from 0 to 128 [ 81.325737][ T4296] XFS (loop0): Mounting V5 Filesystem [ 81.555079][ T4331] EXT4-fs (loop4): Test dummy encryption mode enabled [ 81.595673][ T4331] EXT4-fs (loop4): Test dummy encryption mode enabled [ 81.883161][ T4331] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 82.254086][ T4339] loop3: detected capacity change from 0 to 512 [ 82.281650][ T4331] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.355114][ T4339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.487793][ T4339] EXT4-fs (loop3): 1 truncate cleaned up [ 82.494607][ T4339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.528121][ T4296] XFS (loop0): Ending clean mount [ 82.622516][ T4296] XFS (loop0): Quotacheck needed: Please wait. [ 83.163631][ T4355] loop1: detected capacity change from 0 to 128 [ 83.213928][ T4296] XFS (loop0): Quotacheck: Done. [ 83.275941][ T4169] XFS (loop0): Unmounting Filesystem [ 83.455032][ T4358] loop2: detected capacity change from 0 to 512 [ 83.471430][ T4355] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 83.508290][ T4358] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.613729][ T4365] loop4: detected capacity change from 0 to 1024 [ 83.632697][ T4358] EXT4-fs (loop2): 1 truncate cleaned up [ 83.659776][ T4358] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.538987][ T4365] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.551585][ T4365] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.616067][ T4365] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.27: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.839004][ T4365] EXT4-fs (loop4): 1 orphan inode deleted [ 85.854929][ T4365] EXT4-fs (loop4): mounted filesystem without journal. Opts: dax=never,acl,inode_readahead_blks=0x0000000000000080,init_itable,data=ordered,,errors=continue. Quota mode: writeback. [ 86.871198][ T7] cfg80211: failed to load regulatory.db [ 89.150680][ T4416] loop0: detected capacity change from 0 to 4096 [ 89.247200][ T4416] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 90.295565][ T4223] Bluetooth: hci0: command 0x1407 tx timeout [ 92.575677][ T4444] loop1: detected capacity change from 0 to 2048 [ 92.604603][ T4452] loop0: detected capacity change from 0 to 128 [ 92.683757][ T4444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.716517][ T4452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.733714][ T4452] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.922805][ T4444] overlayfs: missing 'lowerdir' [ 93.899870][ T21] Bluetooth: hci0: command 0x1407 tx timeout [ 94.423472][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.495689][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.705437][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 94.715709][ T4483] loop2: detected capacity change from 0 to 512 [ 94.765684][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 94.998044][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.033834][ T13] usb 5-1: config 0 has no interfaces? [ 95.039546][ T13] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 95.049148][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.077086][ T4483] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.63: casefold flag without casefold feature [ 95.077939][ T13] usb 5-1: config 0 descriptor?? [ 95.096489][ T7] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 95.104762][ T7] usb 4-1: config 0 has no interface number 0 [ 95.112471][ T7] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=90.06 [ 95.124153][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.143691][ T4483] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.63: couldn't read orphan inode 15 (err -117) [ 95.169687][ T7] usb 4-1: config 0 descriptor?? [ 95.196159][ T4483] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.231233][ T7] asix: probe of 4-1:0.52 failed with error -22 [ 95.443732][ T26] audit: type=1326 audit(1750156240.206:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 95.530767][ T4264] usb 5-1: USB disconnect, device number 2 [ 96.253271][ T26] audit: type=1326 audit(1750156240.206:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 96.295234][ T26] audit: type=1326 audit(1750156240.216:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.062021][ T26] audit: type=1326 audit(1750156240.216:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.088604][ T4507] loop0: detected capacity change from 0 to 256 [ 97.097294][ T4503] loop1: detected capacity change from 0 to 2048 [ 97.113809][ T7] usb 4-1: USB disconnect, device number 2 [ 97.140290][ T26] audit: type=1326 audit(1750156240.216:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.204425][ T4219] Bluetooth: hci0: command 0x1407 tx timeout [ 97.212877][ T26] audit: type=1326 audit(1750156240.216:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.246226][ T4513] loop2: detected capacity change from 0 to 128 [ 97.252595][ T26] audit: type=1326 audit(1750156240.216:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.281107][ T4503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.295504][ T26] audit: type=1326 audit(1750156240.216:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.319487][ T4507] FAT-fs (loop0): Directory bread(block 64) failed [ 97.338461][ T26] audit: type=1326 audit(1750156240.216:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.374375][ T4503] overlayfs: missing 'lowerdir' [ 97.413788][ T4513] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.424926][ T4507] FAT-fs (loop0): Directory bread(block 65) failed [ 97.436853][ T4507] FAT-fs (loop0): Directory bread(block 66) failed [ 97.468605][ T4507] FAT-fs (loop0): Directory bread(block 67) failed [ 97.496533][ T4507] FAT-fs (loop0): Directory bread(block 68) failed [ 97.504885][ T4513] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.515334][ T26] audit: type=1326 audit(1750156240.216:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca390c929 code=0x7ffc0000 [ 97.525688][ T4507] FAT-fs (loop0): Directory bread(block 69) failed [ 97.595501][ T4507] FAT-fs (loop0): Directory bread(block 70) failed [ 98.253936][ T4507] FAT-fs (loop0): Directory bread(block 71) failed [ 98.267999][ T4507] FAT-fs (loop0): Directory bread(block 72) failed [ 98.317632][ T4507] FAT-fs (loop0): Directory bread(block 73) failed [ 99.193361][ T4510] loop4: detected capacity change from 0 to 32768 [ 99.498062][ T4535] loop2: detected capacity change from 0 to 1024 [ 99.730423][ T4535] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.240573][ T4554] loop3: detected capacity change from 0 to 2048 [ 101.248143][ T23] Bluetooth: hci0: command 0x1407 tx timeout [ 101.249092][ T4558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.307977][ T4554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.331738][ T4571] loop2: detected capacity change from 0 to 512 [ 102.352697][ T4572] loop4: detected capacity change from 0 to 128 [ 102.431805][ T4571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.495237][ T4571] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.518952][ T4572] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.656137][ T4572] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.719667][ T4571] EXT4-fs (loop2): 1 truncate cleaned up [ 102.855770][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.857896][ T4571] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 103.945271][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 104.775807][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.795709][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.839637][ T4598] loop4: detected capacity change from 0 to 512 [ 104.856623][ T7] usb 1-1: Product: syz [ 104.875278][ T7] usb 1-1: Manufacturer: syz [ 104.914526][ T7] usb 1-1: SerialNumber: syz [ 104.988544][ T7] usb 1-1: config 0 descriptor?? [ 104.997557][ T4598] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.90: casefold flag without casefold feature [ 105.012047][ T4598] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.90: couldn't read orphan inode 15 (err -117) [ 105.034710][ T4598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.285608][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.485296][ T23] Bluetooth: hci0: command 0x1407 tx timeout [ 106.436375][ T4609] loop1: detected capacity change from 0 to 2048 [ 107.013525][ T4619] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.075391][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 107.128431][ T7] usb 1-1: USB disconnect, device number 2 [ 108.558993][ T4646] input: syz1 as /devices/virtual/input/input5 [ 108.565695][ T4646] input: failed to attach handler leds to device input5, error: -6 [ 108.735326][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.058206][ T4657] loop0: detected capacity change from 0 to 2048 [ 109.105548][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 109.231281][ T4657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.241688][ T21] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 109.293048][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.365108][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.485308][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.577915][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.611776][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.657879][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.861279][ T4671] loop2: detected capacity change from 0 to 512 [ 109.913525][ T4671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.950018][ T21] usb 2-1: GET_CAPABILITIES returned 0 [ 109.957977][ T21] usbtmc 2-1:16.0: can't read capabilities [ 109.987661][ T4671] EXT4-fs (loop2): 1 truncate cleaned up [ 109.993370][ T4671] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.125312][ T4219] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.782178][ T4219] usb 5-1: Using ep0 maxpacket: 8 [ 110.800529][ T21] usb 2-1: USB disconnect, device number 2 [ 111.078411][ T4219] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.095885][ T4219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.104085][ T4219] usb 5-1: Product: syz [ 111.114665][ T4219] usb 5-1: Manufacturer: syz [ 111.124145][ T4219] usb 5-1: SerialNumber: syz [ 111.178506][ T4219] usb 5-1: config 0 descriptor?? [ 112.238158][ T4219] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.157685][ T4702] loop2: detected capacity change from 0 to 64 [ 113.244396][ T4702] hfs: unable to locate alternate MDB [ 113.265333][ T4702] hfs: continuing without an alternate MDB [ 113.811212][ T4711] loop1: detected capacity change from 0 to 2048 [ 113.891391][ T4711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.943317][ T4715] loop0: detected capacity change from 0 to 512 [ 113.976518][ T4717] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 113.983681][ T4717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.008481][ T4717] vhci_hcd vhci_hcd.0: Device attached [ 114.017197][ T4720] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 114.023841][ T4720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.056332][ T4720] vhci_hcd vhci_hcd.0: Device attached [ 114.075326][ T4715] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.098473][ T4717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.150325][ T4717] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 114.156991][ T4717] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 114.205695][ T4715] EXT4-fs (loop0): 1 truncate cleaned up [ 114.211560][ T4223] vhci_hcd: vhci_device speed not set [ 114.219625][ T4715] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.256354][ T4717] vhci_hcd vhci_hcd.0: Device attached [ 114.266323][ T4731] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 114.272968][ T4731] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 114.285372][ T4223] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 114.303170][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 114.315492][ T4219] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 114.321381][ T4720] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 114.329428][ T4720] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.336996][ T4219] usb 5-1: USB disconnect, device number 3 [ 114.359890][ T4731] vhci_hcd vhci_hcd.0: Device attached [ 114.382219][ T4720] vhci_hcd vhci_hcd.0: Device attached [ 114.525691][ T4717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.547714][ T4736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.129'. [ 114.693875][ T4717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.924045][ T4736] Zero length message leads to an empty skb [ 115.025579][ T4720] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.097212][ T4733] vhci_hcd: connection closed [ 115.114016][ T4729] vhci_hcd: connection closed [ 115.129067][ T4718] vhci_hcd: connection reset by peer [ 115.139294][ T4721] vhci_hcd: connection closed [ 115.139495][ T4726] vhci_hcd: connection closed [ 115.181155][ T154] vhci_hcd: stop threads [ 115.198431][ T154] vhci_hcd: release socket [ 115.204042][ T154] vhci_hcd: disconnect device [ 115.210892][ T154] vhci_hcd: stop threads [ 115.216727][ T154] vhci_hcd: release socket [ 115.221303][ T154] vhci_hcd: disconnect device [ 115.227879][ T154] vhci_hcd: stop threads [ 115.232156][ T154] vhci_hcd: release socket [ 115.237513][ T154] vhci_hcd: disconnect device [ 115.242641][ T154] vhci_hcd: stop threads [ 115.247065][ T154] vhci_hcd: release socket [ 115.255760][ T154] vhci_hcd: disconnect device [ 115.260907][ T154] vhci_hcd: stop threads [ 115.267814][ T154] vhci_hcd: release socket [ 115.272341][ T154] vhci_hcd: disconnect device [ 115.273490][ T4743] loop3: detected capacity change from 0 to 512 [ 115.351608][ T4743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.483176][ T4743] EXT4-fs (loop3): 1 truncate cleaned up [ 115.567795][ T4743] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.835168][ C0] sched: RT throttling activated [ 119.139543][ T4754] loop2: detected capacity change from 0 to 32768 [ 119.320738][ T4754] JBD2: Ignoring recovery information on journal [ 119.424725][ T4781] loop4: detected capacity change from 0 to 128 [ 119.467775][ T4781] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.494574][ T4781] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.968193][ T4223] vhci_hcd: vhci_device speed not set [ 120.088868][ T4754] JBD2: recovery failed [ 120.093116][ T4754] (syz.2.134,4754,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 120.140468][ T4308] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.184764][ T4754] (syz.2.134,4754,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 120.234069][ T4754] (syz.2.134,4754,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 120.435222][ T4754] (syz.2.134,4754,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 120.461625][ T4754] (syz.2.134,4754,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 121.043434][ T4802] loop4: detected capacity change from 0 to 2048 [ 121.919622][ T4802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.431400][ T7] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 122.651744][ T4811] overlayfs: missing 'lowerdir' [ 122.756813][ T7] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 122.785909][ T7] usb usb38-port1: attempt power cycle [ 123.195552][ T7] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 123.766196][ T7] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 123.811320][ T7] usb usb38-port1: unable to enumerate USB device [ 125.256515][ T4844] loop1: detected capacity change from 0 to 128 [ 125.480758][ T4848] loop3: detected capacity change from 0 to 512 [ 125.490416][ T4846] loop2: detected capacity change from 0 to 2048 [ 125.529905][ T4844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.559447][ T4848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.576354][ T4846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.595863][ T4844] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.708687][ T4848] EXT4-fs (loop3): 1 truncate cleaned up [ 125.724952][ T4848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.740449][ T4873] Cannot find add_set index 0 as target [ 129.969676][ T4886] loop3: detected capacity change from 0 to 512 [ 130.045404][ T4886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.119606][ T4886] EXT4-fs (loop3): 1 truncate cleaned up [ 130.223719][ T4886] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 131.051208][ T4897] loop4: detected capacity change from 0 to 128 [ 131.172822][ T4897] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.271308][ T4897] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.816146][ T4914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'. [ 132.847754][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854291][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105451][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.395358][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 133.515457][ T7] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 133.553650][ T7] usb 5-1: config 0 has no interface number 0 [ 133.735943][ T7] usb 5-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 133.765408][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.783932][ T7] usb 5-1: Product: syz [ 133.804481][ T7] usb 5-1: Manufacturer: syz [ 133.814638][ T7] usb 5-1: SerialNumber: syz [ 133.855445][ T7] usb 5-1: config 0 descriptor?? [ 133.919588][ T7] option 5-1:0.211: GSM modem (1-port) converter detected [ 134.709064][ T4912] loop2: detected capacity change from 0 to 32768 [ 134.830610][ T4936] ubi31: attaching mtd0 [ 134.868834][ T4936] ubi31: scanning is finished [ 134.880068][ T4936] ubi31: empty MTD device detected [ 134.954988][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 134.955004][ T26] audit: type=1800 audit(1750156279.726:39): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.175" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 135.308587][ T4936] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 135.577805][ T4218] usb 5-1: USB disconnect, device number 4 [ 135.617572][ T4218] option 5-1:0.211: device disconnected [ 135.633782][ T4951] loop4: detected capacity change from 0 to 512 [ 135.735363][ T4951] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.755373][ T4273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.800998][ T4951] EXT4-fs (loop4): 1 truncate cleaned up [ 135.833586][ T4951] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 136.796037][ T4273] usb 4-1: config 0 has no interfaces? [ 137.105645][ T4273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.118412][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.135227][ T4273] usb 4-1: Product: syz [ 137.145967][ T4273] usb 4-1: Manufacturer: syz [ 137.155554][ T4273] usb 4-1: SerialNumber: syz [ 137.179544][ T4273] usb 4-1: config 0 descriptor?? [ 137.499819][ T4218] usb 4-1: USB disconnect, device number 3 [ 139.139057][ T4988] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 139.145640][ T4988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.210551][ T4988] vhci_hcd vhci_hcd.0: Device attached [ 139.293605][ T4992] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 139.300401][ T4992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.362959][ T4992] vhci_hcd vhci_hcd.0: Device attached [ 139.617375][ T4273] vhci_hcd: vhci_device speed not set [ 139.621070][ T4990] vhci_hcd: connection closed [ 139.622945][ T4994] vhci_hcd: connection closed [ 139.635293][ T396] vhci_hcd: stop threads [ 139.660619][ T396] vhci_hcd: release socket [ 139.666468][ T396] vhci_hcd: disconnect device [ 141.833399][ T4273] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 141.856255][ T396] vhci_hcd: stop threads [ 141.955898][ T4273] usb 35-1: enqueue for inactive port 0 [ 141.974152][ T396] vhci_hcd: release socket [ 141.978874][ T396] vhci_hcd: disconnect device [ 142.035290][ T4273] vhci_hcd: vhci_device speed not set [ 142.796236][ T5017] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.752201][ T5032] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 143.758858][ T5032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.795326][ T5029] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 143.801899][ T5029] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 143.874033][ T5032] vhci_hcd vhci_hcd.0: Device attached [ 143.896024][ T5035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 143.996366][ T5029] vhci_hcd vhci_hcd.0: Device attached [ 144.140205][ T4223] usb 41-2: new low-speed USB device number 2 using vhci_hcd [ 144.164528][ T5007] loop2: detected capacity change from 0 to 40427 [ 144.183693][ T5033] vhci_hcd: connection reset by peer [ 144.189371][ T5030] vhci_hcd: connection closed [ 144.199752][ T3072] vhci_hcd: stop threads [ 144.219688][ T3072] vhci_hcd: release socket [ 144.247984][ T3072] vhci_hcd: disconnect device [ 144.435838][ T3072] vhci_hcd: stop threads [ 144.444961][ T3072] vhci_hcd: release socket [ 144.459692][ T3072] vhci_hcd: disconnect device [ 144.464479][ T5007] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.559583][ T5050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.207'. [ 145.125108][ T4219] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.475340][ T4219] usb 5-1: Using ep0 maxpacket: 8 [ 145.520882][ T5057] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 145.527457][ T5057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.602173][ T5057] vhci_hcd vhci_hcd.0: Device attached [ 145.615543][ T4219] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 145.627901][ T5058] vhci_hcd: connection closed [ 145.631775][ T9] vhci_hcd: stop threads [ 145.635784][ T4219] usb 5-1: config 0 has no interface number 0 [ 145.650112][ T9] vhci_hcd: release socket [ 145.670656][ T9] vhci_hcd: disconnect device [ 146.695578][ T4219] usb 5-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 146.704859][ T4219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.723584][ T4219] usb 5-1: Product: syz [ 146.743881][ T4219] usb 5-1: Manufacturer: syz [ 146.748641][ T4219] usb 5-1: SerialNumber: syz [ 146.767112][ T4219] usb 5-1: config 0 descriptor?? [ 146.817096][ T4219] option 5-1:0.211: GSM modem (1-port) converter detected [ 148.146773][ T4219] usb 5-1: USB disconnect, device number 5 [ 148.438580][ T4219] option 5-1:0.211: device disconnected [ 148.534887][ T5078] loop2: detected capacity change from 0 to 4096 [ 148.542626][ T5081] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.735230][ T4223] vhci_hcd: vhci_device speed not set [ 150.374212][ T5108] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 150.380789][ T5108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.449673][ T5108] vhci_hcd vhci_hcd.0: Device attached [ 150.624843][ T5114] loop4: detected capacity change from 0 to 1024 [ 151.545649][ T5109] vhci_hcd: connection closed [ 151.565894][ T4307] vhci_hcd: stop threads [ 151.575405][ T4307] vhci_hcd: release socket [ 151.588830][ T4307] vhci_hcd: disconnect device [ 151.619873][ T4272] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 151.630769][ T4272] usb 37-1: enqueue for inactive port 0 [ 151.906777][ T4272] vhci_hcd: vhci_device speed not set [ 152.311370][ T5114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.729391][ T5134] loop4: detected capacity change from 0 to 512 [ 152.730467][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.879501][ T5134] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.991560][ T5143] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 153.050762][ T5134] EXT4-fs (loop4): 1 truncate cleaned up [ 153.065261][ T5134] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.154299][ T5148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.164296][ T5148] bond1: (slave bond2): making interface the new active one [ 153.172811][ T5148] bond1: (slave bond2): Enslaving as an active interface with an up link [ 153.191654][ T5143] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 153.200894][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.212823][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.224019][ T7] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 153.233438][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.260245][ T7] usb 4-1: config 0 descriptor?? [ 154.254344][ T7] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x3 [ 154.361772][ T7] cm6533_jd 0003:0D8C:0022.0001: item fetching failed at offset 4/5 [ 154.505584][ T7] cm6533_jd 0003:0D8C:0022.0001: parse failed [ 154.588002][ T7] cm6533_jd: probe of 0003:0D8C:0022.0001 failed with error -22 [ 154.985788][ T7] usb 4-1: USB disconnect, device number 4 [ 155.779679][ T5166] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 155.835392][ T5166] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 156.405024][ T5178] loop3: detected capacity change from 0 to 1024 [ 157.016882][ T5181] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 157.023507][ T5181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.074168][ T5178] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.134449][ T26] audit: type=1326 audit(1750156301.906:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2277fbb929 code=0x7ffc0000 [ 157.157154][ T5181] vhci_hcd vhci_hcd.0: Device attached [ 157.172519][ T5182] vhci_hcd: connection closed [ 157.173682][ T4449] vhci_hcd: stop threads [ 157.193094][ T4449] vhci_hcd: release socket [ 157.235263][ T26] audit: type=1326 audit(1750156301.986:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2277fbb929 code=0x7ffc0000 [ 157.266608][ T4449] vhci_hcd: disconnect device [ 157.345627][ T26] audit: type=1326 audit(1750156301.986:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2277fbb929 code=0x7ffc0000 [ 157.405452][ T26] audit: type=1326 audit(1750156301.986:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2277fbb929 code=0x7ffc0000 [ 157.499147][ T26] audit: type=1326 audit(1750156301.986:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2277fbb929 code=0x7ffc0000 [ 158.228778][ T5201] loop3: detected capacity change from 0 to 512 [ 159.175330][ T5201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.338668][ T5201] EXT4-fs (loop3): 1 truncate cleaned up [ 159.365325][ T5201] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.927588][ T5218] loop4: detected capacity change from 0 to 8192 [ 165.032853][ T5267] loop3: detected capacity change from 0 to 16 [ 165.158241][ T5267] erofs: (device loop3): mounted with root inode @ nid 36. [ 165.528300][ T5268] capability: warning: `syz.3.268' uses deprecated v2 capabilities in a way that may be insecure [ 165.562004][ T5268] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 165.571443][ T5268] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 165.581014][ T5268] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 165.590069][ T5268] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 165.598453][ T26] audit: type=1800 audit(1750156310.376:45): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.268" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 166.957415][ T5286] loop3: detected capacity change from 0 to 1024 [ 167.045375][ T5286] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.684470][ T5296] loop4: detected capacity change from 0 to 512 [ 167.743086][ T5296] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.829234][ T5296] EXT4-fs (loop4): 1 truncate cleaned up [ 167.843495][ T5296] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 168.823516][ T5314] device batadv0 entered promiscuous mode [ 168.867560][ T5314] device batadv0 left promiscuous mode [ 169.760672][ T5323] loop2: detected capacity change from 0 to 16 [ 169.828908][ T5323] erofs: (device loop2): mounted with root inode @ nid 36. [ 169.904564][ T5325] loop4: detected capacity change from 0 to 512 [ 170.134668][ T5325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.232826][ T5330] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 170.242395][ T5330] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 170.252122][ T5330] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 170.261403][ T5330] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 170.273433][ T26] audit: type=1800 audit(1750156315.046:46): pid=5330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.281" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 170.527688][ T5325] EXT4-fs (loop4): 1 truncate cleaned up [ 170.534296][ T5325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.969094][ T5336] loop3: detected capacity change from 0 to 1024 [ 171.308044][ T5336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.004517][ T5351] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 174.010510][ T5369] loop4: detected capacity change from 0 to 512 [ 174.042858][ T5369] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.224297][ T5369] EXT4-fs (loop4): 1 truncate cleaned up [ 174.232685][ T5369] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.897616][ T5412] ubi31: attaching mtd0 [ 177.925228][ T5412] ubi31: scanning is finished [ 178.047800][ T5412] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 178.060546][ T5412] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 178.069490][ T5412] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 178.081685][ T5412] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 178.090633][ T5412] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 178.100369][ T5412] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 178.110400][ T5412] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3287879771 [ 178.122634][ T5412] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 178.142640][ T5418] ubi31: background thread "ubi_bgt31d" started, PID 5418 [ 178.816278][ T5429] syz.1.306 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.827581][ T5429] netlink: 176 bytes leftover after parsing attributes in process `syz.1.306'. [ 179.923465][ T5437] loop4: detected capacity change from 0 to 512 [ 180.677224][ T5437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.796279][ T5437] EXT4-fs (loop4): 1 truncate cleaned up [ 180.822128][ T5437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.271530][ T5456] loop2: detected capacity change from 0 to 512 [ 181.386850][ T5456] EXT4-fs (loop2): Test dummy encryption mode enabled [ 181.415342][ T5456] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.461719][ T5456] EXT4-fs (loop2): 1 truncate cleaned up [ 181.485525][ T5456] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,test_dummy_encryption=v1,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 181.683554][ T26] audit: type=1804 audit(1750156326.456:47): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.314" name="/newroot/55/file0/file1" dev="fuse" ino=1 res=1 errno=0 [ 181.766106][ T26] audit: type=1800 audit(1750156326.456:48): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="/" dev="fuse" ino=1 res=0 errno=0 [ 181.841966][ T26] audit: type=1804 audit(1750156326.486:49): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.314" name="/newroot/55/file0/file1" dev="fuse" ino=1 res=1 errno=0 [ 181.913741][ T26] audit: type=1800 audit(1750156326.486:50): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="/" dev="fuse" ino=1 res=0 errno=0 [ 182.421925][ T5472] netlink: 176 bytes leftover after parsing attributes in process `syz.3.317'. [ 182.485582][ T5474] mmap: syz.4.315 (5474) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 183.708853][ T5484] loop3: detected capacity change from 0 to 2048 [ 183.801752][ T5484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.089973][ T4310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.201324][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 185.228961][ T5500] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 185.401269][ T4310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.333007][ T5515] netlink: 176 bytes leftover after parsing attributes in process `syz.3.331'. [ 186.362049][ T4310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.078493][ T4310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.835494][ T3506] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.075663][ T3506] usb 4-1: Using ep0 maxpacket: 32 [ 190.082622][ T5559] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.195527][ T3506] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.218461][ T3506] usb 4-1: config 0 has no interface number 0 [ 190.250409][ T3506] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.306806][ T3506] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.352251][ T3506] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 190.394398][ T3506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.467519][ T3506] usb 4-1: config 0 descriptor?? [ 190.826530][ T4310] bond1: (slave gretap1): Releasing backup interface [ 190.882126][ T5541] chnl_net:caif_netlink_parms(): no params data found [ 191.242207][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.256259][ T3506] uclogic 0003:28BD:0094.0002: pen parameters not found [ 191.263352][ T3506] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 191.308652][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.370279][ T5541] device bridge_slave_0 entered promiscuous mode [ 191.396021][ T3506] Bluetooth: hci1: command 0x0406 tx timeout [ 191.400548][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.448387][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.455427][ T3506] Bluetooth: hci2: command 0x0406 tx timeout [ 191.460645][ T5541] device bridge_slave_1 entered promiscuous mode [ 191.499556][ T3506] Bluetooth: hci0: command 0x0406 tx timeout [ 191.532845][ T3506] Bluetooth: hci4: command 0x0406 tx timeout [ 191.780678][ T3506] Bluetooth: hci3: command 0x0409 tx timeout [ 191.873106][ T4273] usb 4-1: USB disconnect, device number 5 [ 192.160319][ T5541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.239106][ T5541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.459014][ T5541] team0: Port device team_slave_0 added [ 192.517124][ T5541] team0: Port device team_slave_1 added [ 192.599965][ T5599] loop3: detected capacity change from 0 to 1024 [ 192.730991][ T4310] device hsr_slave_0 left promiscuous mode [ 192.798013][ T5603] loop4: detected capacity change from 0 to 512 [ 192.912858][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 193.063870][ T4310] device hsr_slave_1 left promiscuous mode [ 193.073352][ T5603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.119231][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.243762][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.374222][ T5603] EXT4-fs (loop4): 1 truncate cleaned up [ 193.436910][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.455245][ T5603] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.535336][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.648244][ T4310] device bridge_slave_1 left promiscuous mode [ 193.656486][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.981709][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 194.306924][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.313295][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.458690][ T4310] device bridge_slave_0 left promiscuous mode [ 194.539527][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.819241][ T5629] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 194.825818][ T5629] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.917951][ T5629] vhci_hcd vhci_hcd.0: Device attached [ 194.946757][ T4310] device veth1_macvtap left promiscuous mode [ 194.953432][ T4310] device veth0_macvtap left promiscuous mode [ 194.976895][ T5632] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 194.983728][ T5632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.048372][ T4310] device veth1_vlan left promiscuous mode [ 195.110281][ T4310] device veth0_vlan left promiscuous mode [ 195.135412][ T5123] vhci_hcd: vhci_device speed not set [ 195.215611][ T5123] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 195.243800][ T5632] vhci_hcd vhci_hcd.0: Device attached [ 195.317785][ T5636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.643095][ T5633] vhci_hcd: connection closed [ 195.643806][ T3072] vhci_hcd: stop threads [ 195.656092][ T5630] vhci_hcd: connection reset by peer [ 195.682559][ T3072] vhci_hcd: release socket [ 195.722181][ T3072] vhci_hcd: disconnect device [ 195.763104][ T3072] vhci_hcd: stop threads [ 195.788118][ T3072] vhci_hcd: release socket [ 195.828918][ T3072] vhci_hcd: disconnect device [ 196.057371][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 196.833548][ T4310] bond1 (unregistering): (slave bond2): Releasing backup interface [ 196.961980][ T4310] bond2 (unregistering): Released all slaves [ 197.199131][ T4310] bond1 (unregistering): Released all slaves [ 198.014035][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 198.041767][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 198.072665][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.104330][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.145270][ T4219] Bluetooth: hci3: command 0x0419 tx timeout [ 198.887314][ T4310] bond0 (unregistering): Released all slaves [ 199.019361][ T5666] loop3: detected capacity change from 0 to 512 [ 199.076633][ T5666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.085611][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.114635][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.144827][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.166486][ T5666] EXT4-fs (loop3): 1 truncate cleaned up [ 199.192389][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.200278][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.229654][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.241105][ T5666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.313535][ T5541] device hsr_slave_0 entered promiscuous mode [ 199.363676][ T5541] device hsr_slave_1 entered promiscuous mode [ 199.390027][ T5541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.430613][ T5541] Cannot create hsr debugfs directory [ 199.438496][ T5676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.496597][ T5672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 199.503165][ T5672] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 199.549717][ T5672] vhci_hcd vhci_hcd.0: Device attached [ 199.565375][ T5676] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 199.572024][ T5676] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.581800][ T5674] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 199.588444][ T5674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.720148][ T5674] vhci_hcd vhci_hcd.0: Device attached [ 199.720276][ T5676] vhci_hcd vhci_hcd.0: Device attached [ 199.765872][ T4253] vhci_hcd: vhci_device speed not set [ 199.957414][ T4253] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 200.117169][ T5678] vhci_hcd: connection closed [ 200.117562][ T3072] vhci_hcd: stop threads [ 200.141097][ T5675] vhci_hcd: connection closed [ 200.162197][ T3072] vhci_hcd: release socket [ 200.213824][ T5673] vhci_hcd: connection reset by peer [ 200.232680][ T3072] vhci_hcd: disconnect device [ 200.238129][ T3072] vhci_hcd: stop threads [ 200.251516][ T3072] vhci_hcd: release socket [ 200.302598][ T3072] vhci_hcd: disconnect device [ 200.355532][ T3072] vhci_hcd: stop threads [ 200.359868][ T3072] vhci_hcd: release socket [ 200.380540][ T5123] vhci_hcd: vhci_device speed not set [ 200.507591][ T3072] vhci_hcd: disconnect device [ 200.756796][ T5541] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.810227][ T5541] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.868175][ T5541] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.939141][ T5541] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.825841][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.866869][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.883060][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.927466][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.970437][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.992908][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.052606][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.060047][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.119627][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.157537][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.192459][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.222579][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.229733][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.321515][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.392540][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.468768][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.493606][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.530818][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.554033][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.591772][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.608080][ T3506] Bluetooth: hci0: command 0x1407 tx timeout [ 202.636157][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.660674][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.689415][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.720257][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.752144][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.230592][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.245471][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.278930][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.884972][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.906688][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.992620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.015752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.056756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.095596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.115095][ T5541] device veth0_vlan entered promiscuous mode [ 204.164084][ T5541] device veth1_vlan entered promiscuous mode [ 204.255947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.292085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.377581][ T5770] Cannot find add_set index 0 as target [ 204.389835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.417293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.789533][ T5541] device veth0_macvtap entered promiscuous mode [ 204.833856][ T5541] device veth1_macvtap entered promiscuous mode [ 204.887509][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.903757][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.948397][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.997269][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.030876][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.076627][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.095446][ T4253] vhci_hcd: vhci_device speed not set [ 205.155168][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.192236][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.278240][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.347315][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.688988][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.863341][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.905358][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.935339][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.973831][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.038699][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.118838][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.129370][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.140718][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.154090][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.166931][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.235733][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.323498][ T5541] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.365233][ T5541] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.373983][ T5541] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.568568][ T5541] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.221956][ T5811] 9pnet: Insufficient options for proto=fd [ 207.568509][ T5820] Cannot find add_set index 0 as target [ 207.633899][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.665894][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.729724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.799449][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.853360][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.942722][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.457319][ T4219] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 209.045230][ T4219] usb 4-1: Using ep0 maxpacket: 8 [ 210.117609][ T4219] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 210.151687][ T4219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.160135][ T4219] usb 4-1: Product: syz [ 210.164463][ T4219] usb 4-1: Manufacturer: syz [ 210.169147][ T4219] usb 4-1: SerialNumber: syz [ 210.177553][ T4219] usb 4-1: config 0 descriptor?? [ 210.435381][ T4219] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 212.265557][ T4253] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.451441][ T4219] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 212.499916][ T4219] usb 4-1: USB disconnect, device number 6 [ 212.535263][ T4253] usb 5-1: Using ep0 maxpacket: 16 [ 212.658377][ T4253] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 212.996186][ T4253] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.059499][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.138904][ T4253] usb 5-1: Product: syz [ 213.143581][ T4253] usb 5-1: Manufacturer: syz [ 213.153403][ T4253] usb 5-1: SerialNumber: syz [ 213.972775][ T4253] usb 5-1: config 0 descriptor?? [ 214.279169][ T4273] usb 5-1: USB disconnect, device number 6 [ 218.893119][ T5961] loop4: detected capacity change from 0 to 16 [ 219.120361][ T5961] erofs: (device loop4): mounted with root inode @ nid 36. [ 219.462471][ T5975] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 219.471824][ T5975] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 219.481057][ T5975] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 219.490351][ T5975] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 219.499855][ T26] audit: type=1800 audit(1750156364.276:51): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.424" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 219.987278][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 221.025312][ T4809] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 221.345536][ T4219] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 221.545503][ T4809] usb 5-1: config 1 interface 0 has no altsetting 0 [ 221.585258][ T4219] usb 4-1: Using ep0 maxpacket: 8 [ 221.731453][ T4219] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 221.763084][ T4219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.845320][ T4809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.854540][ T4809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.916082][ T4219] pvrusb2: Hardware description: Terratec Grabster AV400 [ 222.020705][ T4219] pvrusb2: ********** [ 222.119675][ T4219] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 222.293295][ T4219] pvrusb2: Important functionality might not be entirely working. [ 222.426657][ T4219] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 222.526201][ T6012] loop5: detected capacity change from 0 to 2048 [ 222.543007][ T4219] pvrusb2: ********** [ 222.595405][ T4809] usb 5-1: Product: syz [ 222.599629][ T4809] usb 5-1: Manufacturer: syz [ 222.604248][ T4809] usb 5-1: SerialNumber: syz [ 222.627713][ T2424] pvrusb2: Invalid write control endpoint [ 222.639584][ T6012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.674184][ T4219] usb 4-1: USB disconnect, device number 7 [ 222.854605][ T2424] pvrusb2: Invalid write control endpoint [ 222.881005][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 222.895855][ T6027] loop5: detected capacity change from 0 to 16 [ 222.938795][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 222.975421][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 222.979432][ T6027] erofs: (device loop5): mounted with root inode @ nid 36. [ 222.998179][ T4809] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 223.015239][ T2424] pvrusb2: Device being rendered inoperable [ 223.035323][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 223.051029][ T4809] usb 5-1: USB disconnect, device number 7 [ 223.062308][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 223.207128][ T4809] usblp0: removed [ 223.312505][ T6035] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 223.322910][ T6035] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 223.332171][ T6035] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 223.341317][ T6035] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 223.435597][ T26] audit: type=1800 audit(1750156368.126:52): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.441" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 223.554633][ T2424] pvrusb2: Attached sub-driver cx25840 [ 224.035649][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 224.089890][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 224.687701][ T6042] loop5: detected capacity change from 0 to 512 [ 224.746452][ T6042] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 224.818679][ T6042] EXT4-fs (loop5): 1 truncate cleaned up [ 224.836175][ T6042] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.254909][ T6063] loop4: detected capacity change from 0 to 1024 [ 225.357049][ T6064] loop5: detected capacity change from 0 to 16 [ 225.382198][ T6064] erofs: (device loop5): mounted with root inode @ nid 36. [ 225.410188][ T6064] attempt to access beyond end of device [ 225.410188][ T6064] loop5: rw=0, want=40, limit=16 [ 226.245481][ T6063] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.896064][ T6083] loop5: detected capacity change from 0 to 16 [ 227.030387][ T6083] erofs: (device loop5): mounted with root inode @ nid 36. [ 227.379426][ T6093] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 227.388540][ T6093] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 227.397599][ T6093] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 227.406779][ T6093] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 227.416048][ T26] audit: type=1800 audit(1750156372.186:53): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.454" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 227.445369][ T4809] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 227.736652][ T4809] usb 2-1: Using ep0 maxpacket: 8 [ 227.855546][ T4809] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 227.878789][ T4809] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.919386][ T4809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.964449][ T4809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.996045][ T4809] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.015310][ T4253] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 228.034743][ T4809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.093263][ T4809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.285579][ T4253] usb 5-1: Using ep0 maxpacket: 8 [ 228.402436][ T4809] usb 2-1: GET_CAPABILITIES returned 0 [ 228.415465][ T4253] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 228.421500][ T4809] usbtmc 2-1:16.0: can't read capabilities [ 228.464412][ T4253] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 228.531126][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.808225][ T21] usb 2-1: USB disconnect, device number 3 [ 229.068737][ T6115] loop3: detected capacity change from 0 to 512 [ 229.105879][ T4253] usb 5-1: USB disconnect, device number 8 [ 229.141291][ T6115] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.234583][ T6115] EXT4-fs (loop3): 1 truncate cleaned up [ 229.262684][ T6115] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.293165][ T6124] loop5: detected capacity change from 0 to 8 [ 229.474508][ T6124] SQUASHFS error: Unable to read inode 0x127 [ 229.518546][ T4252] udevd[4252]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.700494][ T6162] loop3: detected capacity change from 0 to 1024 [ 232.825335][ T6162] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.326389][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.476'. [ 234.346721][ T6199] loop3: detected capacity change from 0 to 512 [ 234.420244][ T6199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 234.477758][ T6199] EXT4-fs (loop3): 1 truncate cleaned up [ 234.493165][ T6199] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.903349][ T6230] loop5: detected capacity change from 0 to 4096 [ 239.136575][ T6255] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.122555][ T6258] loop3: detected capacity change from 0 to 131072 [ 240.228836][ T6258] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.336358][ T6258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 240.367442][ T6258] F2FS-fs (loop3): inode (7) has corrupted xattr [ 240.376793][ T26] audit: type=1800 audit(1750156385.146:54): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.489" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 242.229704][ T6307] netlink: 72 bytes leftover after parsing attributes in process `syz.1.503'. [ 242.361451][ T6307] device netdevsim0 entered promiscuous mode [ 243.839850][ T6340] loop5: detected capacity change from 0 to 512 [ 243.986236][ T6340] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 244.056368][ T6340] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.985256][ T4273] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 245.200131][ T6366] loop5: detected capacity change from 0 to 512 [ 245.264644][ T6366] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.355659][ T4273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.393512][ T4273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.562830][ T4273] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 245.625857][ T6366] EXT4-fs (loop5): 1 truncate cleaned up [ 245.685226][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.688877][ T6366] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,inode_readahead_blks=0x0000000000000080,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 245.693413][ T4273] usb 4-1: SerialNumber: syz [ 246.116802][ T4273] usb 4-1: 0:2 : does not exist [ 246.806851][ T6386] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 246.812755][ T21] usb 4-1: USB disconnect, device number 8 [ 246.813422][ T6386] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 246.871360][ T6386] vhci_hcd vhci_hcd.0: Device attached [ 246.934426][ T6386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 247.005521][ T6397] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 247.012177][ T6397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 247.031591][ T6399] kernel profiling enabled (shift: 5) [ 247.041741][ T6397] vhci_hcd vhci_hcd.0: Device attached [ 247.049115][ T6403] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 247.055986][ T6403] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 247.063820][ T6403] vhci_hcd vhci_hcd.0: Device attached [ 247.065368][ T4809] vhci_hcd: vhci_device speed not set [ 247.099203][ T6386] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 247.106027][ T6386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 247.179794][ T4809] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 247.763394][ T6386] vhci_hcd vhci_hcd.0: Device attached [ 247.821645][ T6403] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 247.919725][ T6397] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18) [ 247.926378][ T6397] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 247.947674][ T6386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 247.973076][ T6386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 247.984486][ T6397] vhci_hcd vhci_hcd.0: Device attached [ 247.995438][ T6391] vhci_hcd: connection reset by peer [ 248.001003][ T6400] vhci_hcd: connection closed [ 248.001161][ T6404] vhci_hcd: connection closed [ 248.007635][ T6408] vhci_hcd: connection closed [ 248.012541][ T6412] vhci_hcd: connection closed [ 248.387029][ T154] vhci_hcd: stop threads [ 248.473253][ T154] vhci_hcd: release socket [ 248.560481][ T154] vhci_hcd: disconnect device [ 248.642905][ T154] vhci_hcd: stop threads [ 248.784152][ T154] vhci_hcd: release socket [ 248.862061][ T154] vhci_hcd: disconnect device [ 248.924071][ T154] vhci_hcd: stop threads [ 248.929472][ T154] vhci_hcd: release socket [ 248.933992][ T154] vhci_hcd: disconnect device [ 248.939327][ T154] vhci_hcd: stop threads [ 248.944040][ T154] vhci_hcd: release socket [ 249.098184][ T154] vhci_hcd: disconnect device [ 249.113363][ T154] vhci_hcd: stop threads [ 249.751308][ T154] vhci_hcd: release socket [ 249.756476][ T154] vhci_hcd: disconnect device [ 249.800916][ T26] audit: type=1326 audit(1750156394.576:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be806929 code=0x7ffc0000 [ 250.400700][ T26] audit: type=1326 audit(1750156394.726:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f78be806929 code=0x7ffc0000 [ 250.506735][ T26] audit: type=1326 audit(1750156394.726:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be806929 code=0x7ffc0000 [ 250.531485][ T26] audit: type=1326 audit(1750156394.756:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f78be806929 code=0x7ffc0000 [ 250.556932][ T26] audit: type=1326 audit(1750156394.766:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be806929 code=0x7ffc0000 [ 250.587735][ T6452] loop3: detected capacity change from 0 to 512 [ 250.649822][ T6452] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 252.138657][ T6452] EXT4-fs (loop3): 1 truncate cleaned up [ 252.144606][ T6452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.407697][ T4809] vhci_hcd: vhci_device speed not set [ 253.972675][ T21] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 254.481174][ T6511] loop3: detected capacity change from 0 to 512 [ 254.509167][ T6511] EXT4-fs (loop3): Ignoring removed bh option [ 254.543364][ T6511] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.574936][ T6511] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 254.627090][ T6511] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 254.651023][ T6511] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 254.676485][ T6511] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 254.703311][ T21] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 254.721031][ T21] usb usb42-port1: attempt power cycle [ 255.146175][ T21] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 255.238944][ T6522] loop3: detected capacity change from 0 to 16 [ 255.566692][ T6522] erofs: (device loop3): mounted with root inode @ nid 36. [ 255.601672][ T6522] attempt to access beyond end of device [ 255.601672][ T6522] loop3: rw=0, want=40, limit=16 [ 255.976865][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016457][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.198131][ T21] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 257.274167][ T21] usb usb42-port1: unable to enumerate USB device [ 257.825882][ T6537] loop3: detected capacity change from 0 to 512 [ 257.869820][ T6537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.904631][ T6537] EXT4-fs (loop3): 1 truncate cleaned up [ 257.914654][ T6537] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.137281][ T6558] futex_wake_op: syz.0.557 tries to shift op by -33; fix this program [ 261.812960][ T6577] loop3: detected capacity change from 0 to 16 [ 262.549082][ T6577] erofs: (device loop3): mounted with root inode @ nid 36. [ 262.564630][ T6575] attempt to access beyond end of device [ 262.564630][ T6575] loop3: rw=0, want=40, limit=16 [ 265.605461][ T6606] tipc: Started in network mode [ 265.635330][ T6606] tipc: Node identity 7f000001, cluster identity 4711 [ 265.677751][ T6606] tipc: Enabled bearer , priority 10 [ 266.713885][ T4809] tipc: Node number set to 2130706433 [ 267.320574][ T6642] loop5: detected capacity change from 0 to 16 [ 268.168132][ T6642] erofs: (device loop5): mounted with root inode @ nid 36. [ 268.182464][ T6640] attempt to access beyond end of device [ 268.182464][ T6640] loop5: rw=0, want=40, limit=16 [ 268.465348][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 268.705211][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 268.754764][ T6655] loop5: detected capacity change from 0 to 1024 [ 268.825299][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 269.051961][ T23] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 269.092642][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.132962][ T23] usb 5-1: Product: syz [ 269.157729][ T23] usb 5-1: Manufacturer: syz [ 269.162385][ T23] usb 5-1: SerialNumber: syz [ 269.207679][ T23] usb 5-1: config 0 descriptor?? [ 269.296181][ T23] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 269.321134][ T6664] loop5: detected capacity change from 0 to 2048 [ 269.427396][ T6664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.568139][ T23] usb 5-1: USB disconnect, device number 9 [ 270.795179][ T6694] overlayfs: missing 'lowerdir' [ 273.006855][ T6712] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 273.013427][ T6712] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.254049][ T6712] vhci_hcd vhci_hcd.0: Device attached [ 273.342268][ T6714] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 273.348929][ T6714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.465397][ T4223] vhci_hcd: vhci_device speed not set [ 273.545213][ T4223] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 273.655379][ T6714] vhci_hcd vhci_hcd.0: Device attached [ 273.702130][ T6723] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 273.807174][ T6721] vhci_hcd: connection closed [ 273.807795][ T6717] vhci_hcd: connection reset by peer [ 273.831328][ T4310] vhci_hcd: stop threads [ 273.885131][ T4310] vhci_hcd: release socket [ 273.900489][ T4310] vhci_hcd: disconnect device [ 273.923018][ T4310] vhci_hcd: stop threads [ 273.934676][ T4310] vhci_hcd: release socket [ 273.935224][ T4809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 273.945916][ T4310] vhci_hcd: disconnect device [ 274.315458][ T4809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.340420][ T4809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.375188][ T4809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.428948][ T4809] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.456923][ T4809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.491831][ T4809] usb 1-1: config 0 descriptor?? [ 275.738345][ T4809] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 275.901526][ T4809] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 275.954758][ T4809] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 276.038104][ T4809] usb 1-1: USB disconnect, device number 3 [ 276.331052][ T6753] fido_id[6753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 277.671700][ T6752] loop5: detected capacity change from 0 to 32768 [ 279.825238][ T4223] vhci_hcd: vhci_device speed not set [ 280.171645][ T6781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 280.204283][ T6783] loop3: detected capacity change from 0 to 64 [ 280.278341][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.604'. [ 280.305486][ T6775] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 280.312025][ T6775] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 280.355574][ T6777] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 280.362239][ T6777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 280.371327][ T6777] vhci_hcd vhci_hcd.0: Device attached [ 280.379166][ T6775] vhci_hcd vhci_hcd.0: Device attached [ 280.407203][ T6779] vhci_hcd: connection closed [ 280.407376][ T6778] vhci_hcd: connection closed [ 280.407531][ T154] vhci_hcd: stop threads [ 280.427519][ T6786] device bond1 entered promiscuous mode [ 280.442802][ T154] vhci_hcd: release socket [ 280.488647][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.493500][ T154] vhci_hcd: disconnect device [ 280.561532][ T154] vhci_hcd: stop threads [ 280.581475][ T154] vhci_hcd: release socket [ 280.590712][ T154] vhci_hcd: disconnect device [ 280.708391][ T4809] vhci_hcd: vhci_device speed not set [ 280.724665][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.607'. [ 281.825396][ T4273] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 282.095256][ T4273] usb 6-1: Using ep0 maxpacket: 8 [ 282.236492][ T4273] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 282.253271][ T4273] usb 6-1: config 0 has no interface number 0 [ 282.445492][ T4273] usb 6-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 282.467321][ T4273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.491429][ T4273] usb 6-1: Product: syz [ 282.506450][ T4273] usb 6-1: Manufacturer: syz [ 282.523867][ T4273] usb 6-1: SerialNumber: syz [ 282.554537][ T4273] usb 6-1: config 0 descriptor?? [ 282.620135][ T4273] option 6-1:0.211: GSM modem (1-port) converter detected [ 282.822996][ T23] usb 6-1: USB disconnect, device number 2 [ 282.835536][ T23] option 6-1:0.211: device disconnected [ 283.924397][ T6828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 283.931053][ T6828] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 284.100212][ T6833] loop5: detected capacity change from 0 to 1024 [ 284.107621][ T6834] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.137660][ T6828] vhci_hcd vhci_hcd.0: Device attached [ 284.155243][ T6831] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 284.161896][ T6831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 284.185443][ T6833] EXT4-fs (loop5): Ignoring removed bh option [ 284.191828][ T6833] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.210678][ T6828] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(8) [ 284.217245][ T6828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.233738][ T6841] loop3: detected capacity change from 0 to 2048 [ 284.255019][ T6831] vhci_hcd vhci_hcd.0: Device attached [ 284.360186][ T21] vhci_hcd: vhci_device speed not set [ 284.495193][ T21] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 284.496852][ T6841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.514088][ T6828] vhci_hcd vhci_hcd.0: Device attached [ 284.574710][ T6833] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,init_itable=0x0000000000000be6,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nogrpid,acl,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 284.702387][ T6834] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 284.709057][ T6834] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.721494][ T6834] vhci_hcd vhci_hcd.0: Device attached [ 284.741574][ T6843] vhci_hcd: connection closed [ 284.741753][ T6840] vhci_hcd: connection closed [ 284.747469][ T6835] vhci_hcd: connection closed [ 284.754681][ T4310] vhci_hcd: stop threads [ 284.766674][ T6829] vhci_hcd: connection reset by peer [ 284.772668][ T4310] vhci_hcd: release socket [ 284.778353][ T4310] vhci_hcd: disconnect device [ 284.784293][ T4310] vhci_hcd: stop threads [ 284.805677][ T4310] vhci_hcd: release socket [ 284.810792][ T4310] vhci_hcd: disconnect device [ 284.820290][ T4310] vhci_hcd: stop threads [ 284.824579][ T4310] vhci_hcd: release socket [ 284.844894][ T4310] vhci_hcd: disconnect device [ 284.851757][ T4310] vhci_hcd: stop threads [ 284.914861][ T4310] vhci_hcd: release socket [ 284.926216][ T4310] vhci_hcd: disconnect device [ 286.111546][ T6872] overlayfs: missing 'lowerdir' [ 287.760917][ T3072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.450654][ C0] ------------[ cut here ]------------ [ 288.456654][ C0] refcount_t: addition on 0; use-after-free. [ 288.462987][ C0] WARNING: CPU: 0 PID: 14 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 288.472181][ C0] Modules linked in: [ 288.476109][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.185-syzkaller #0 [ 288.484182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.494424][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 288.500541][ C0] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 288.520233][ C0] RSP: 0018:ffffc90000d376e8 EFLAGS: 00010246 [ 288.526372][ C0] RAX: da77718e01d60800 RBX: 0000000000000002 RCX: ffff88813fea9dc0 [ 288.534458][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 288.542483][ C0] RBP: ffffc90000d37850 R08: dffffc0000000000 R09: ffffed1017204f24 [ 288.550601][ C0] R10: ffffed1017204f24 R11: 1ffff11017204f23 R12: ffff88807875b500 [ 288.558630][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 288.566650][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 288.575633][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.582248][ C0] CR2: 00007f467a42e6c0 CR3: 000000000be8e000 CR4: 00000000003506f0 [ 288.590282][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.598300][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.606351][ C0] Call Trace: [ 288.609653][ C0] [ 288.612591][ C0] tipc_crypto_xmit+0x1949/0x2560 [ 288.617684][ C0] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 288.622914][ C0] tipc_bearer_xmit_skb+0x228/0x3c0 [ 288.628180][ C0] ? tipc_bearer_min_mtu+0x190/0x190 [ 288.633504][ C0] tipc_disc_timeout+0x568/0x6b0 [ 288.638506][ C0] ? tipc_disc_create+0x920/0x920 [ 288.643653][ C0] ? tipc_disc_create+0x920/0x920 [ 288.648853][ C0] call_timer_fn+0x16c/0x530 [ 288.653471][ C0] ? tipc_disc_create+0x920/0x920 [ 288.658583][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 288.664601][ C0] ? __run_timers+0x7c0/0x7c0 [ 288.669359][ C0] ? rcu_is_watching+0x11/0xa0 [ 288.674147][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 288.679485][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 288.684710][ C0] ? tipc_disc_create+0x920/0x920 [ 288.689792][ C0] __run_timers+0x525/0x7c0 [ 288.694331][ C0] ? detach_timer+0x2b0/0x2b0 [ 288.699058][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 288.705126][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 288.710014][ C0] run_timer_softirq+0x63/0xf0 [ 288.714790][ C0] handle_softirqs+0x328/0x820 [ 288.719623][ C0] ? run_ksoftirqd+0x98/0xf0 [ 288.724267][ C0] ? do_softirq+0x200/0x200 [ 288.728842][ C0] ? run_ksoftirqd+0x75/0xf0 [ 288.733458][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 288.738708][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 288.744010][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 288.749304][ C0] run_ksoftirqd+0x98/0xf0 [ 288.753722][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 288.758952][ C0] smpboot_thread_fn+0x4f6/0x970 [ 288.763904][ C0] kthread+0x436/0x520 [ 288.768153][ C0] ? cpu_report_death+0x180/0x180 [ 288.773192][ C0] ? kthread_blkcg+0xd0/0xd0 [ 288.777813][ C0] ret_from_fork+0x1f/0x30 [ 288.782251][ C0] [ 288.785317][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 288.792598][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.185-syzkaller #0 [ 288.800658][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.810848][ C0] Call Trace: [ 288.814135][ C0] [ 288.817078][ C0] dump_stack_lvl+0x168/0x230 [ 288.821761][ C0] ? show_regs_print_info+0x20/0x20 [ 288.826971][ C0] ? load_image+0x3b0/0x3b0 [ 288.831564][ C0] panic+0x2c9/0x7f0 [ 288.835478][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 288.840001][ C0] ? ret_from_fork+0x1f/0x30 [ 288.844595][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 288.850055][ C0] __warn+0x248/0x2b0 [ 288.854044][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 288.859533][ C0] report_bug+0x1b7/0x2e0 [ 288.863882][ C0] handle_bug+0x3a/0x70 [ 288.868042][ C0] exc_invalid_op+0x16/0x40 [ 288.872549][ C0] asm_exc_invalid_op+0x16/0x20 [ 288.877409][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 288.883480][ C0] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 288.903100][ C0] RSP: 0018:ffffc90000d376e8 EFLAGS: 00010246 [ 288.909170][ C0] RAX: da77718e01d60800 RBX: 0000000000000002 RCX: ffff88813fea9dc0 [ 288.917146][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 288.925141][ C0] RBP: ffffc90000d37850 R08: dffffc0000000000 R09: ffffed1017204f24 [ 288.933119][ C0] R10: ffffed1017204f24 R11: 1ffff11017204f23 R12: ffff88807875b500 [ 288.941097][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 288.949087][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 288.954566][ C0] tipc_crypto_xmit+0x1949/0x2560 [ 288.959617][ C0] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 288.964825][ C0] tipc_bearer_xmit_skb+0x228/0x3c0 [ 288.970028][ C0] ? tipc_bearer_min_mtu+0x190/0x190 [ 288.975351][ C0] tipc_disc_timeout+0x568/0x6b0 [ 288.980324][ C0] ? tipc_disc_create+0x920/0x920 [ 288.985392][ C0] ? tipc_disc_create+0x920/0x920 [ 288.990446][ C0] call_timer_fn+0x16c/0x530 [ 288.995063][ C0] ? tipc_disc_create+0x920/0x920 [ 289.000104][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.006093][ C0] ? __run_timers+0x7c0/0x7c0 [ 289.010776][ C0] ? rcu_is_watching+0x11/0xa0 [ 289.015554][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 289.020765][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 289.025963][ C0] ? tipc_disc_create+0x920/0x920 [ 289.030997][ C0] __run_timers+0x525/0x7c0 [ 289.035543][ C0] ? detach_timer+0x2b0/0x2b0 [ 289.040237][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.046225][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 289.051083][ C0] run_timer_softirq+0x63/0xf0 [ 289.055852][ C0] handle_softirqs+0x328/0x820 [ 289.060619][ C0] ? run_ksoftirqd+0x98/0xf0 [ 289.065212][ C0] ? do_softirq+0x200/0x200 [ 289.069719][ C0] ? run_ksoftirqd+0x75/0xf0 [ 289.074305][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 289.079500][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 289.084804][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 289.090004][ C0] run_ksoftirqd+0x98/0xf0 [ 289.094430][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 289.099652][ C0] smpboot_thread_fn+0x4f6/0x970 [ 289.104610][ C0] kthread+0x436/0x520 [ 289.108678][ C0] ? cpu_report_death+0x180/0x180 [ 289.113708][ C0] ? kthread_blkcg+0xd0/0xd0 [ 289.118314][ C0] ret_from_fork+0x1f/0x30 [ 289.122891][ C0] [ 289.126233][ C0] Kernel Offset: disabled [ 289.130761][ C0] Rebooting in 86400 seconds..